Effective August 19, 2026. Sandline Tulsa operates a community volleyball app, public event pages, and merchandise links. This policy explains what information we handle and why.
Account information may include your email address, name, password credentials handled by our authentication provider, and an optional phone number. We also retain versioned account-agreement records, including the name and email associated with the account, Terms and participant-waiver versions, acceptance timestamp, and whether the record came from a signup checkbox, a guest-account claim checkbox, or the existing-member migration.
Community activity may include RSVPs, attendance, teams, match results, league or tournament entries, Suns balances and transactions, reward redemptions, poll and survey responses, chat messages, comments, reactions, uploaded photos, member blocks, and reports submitted for organizer review.
We also process notification preferences and subscriptions, and limited technical information such as timestamps, browser requests, IP-derived abuse-prevention identifiers, and server logs needed to secure and operate the service. Rate-limit identifiers are one-way hashed before storage.
To understand whether the public pickup flow is working, we record a small set of first-party funnel events using a random browser-tab identifier that is one-way hashed on the server. These records may include the page path, pickup event identifier, event type, and timestamp. They do not include names, email addresses, claim codes, IP addresses, or form contents.
We use information to create and secure accounts; document Terms and participant-waiver acceptance; organize pickup, leagues, and tournaments; calculate results and rewards; deliver requested email or push notifications; moderate community features; prevent fraud and abuse; troubleshoot the service; and respond to support, legal, or privacy requests. We do not sell personal information.
Supabase provides authentication, database, storage, and realtime services. Vercel hosts the application and produces operational logs. Resend delivers app email. Cloudflare Turnstile helps detect automated form abuse when enabled. Fourthwall operates merchandise checkout and receives information you provide there under its own privacy policy; Sandline sends limited reward-promotion requests when you redeem Suns. Browser push services deliver notifications when you opt in.
These providers may process data in the United States or other locations where they operate. We give providers only the access needed for their service and rely on their contractual and technical safeguards.
Sandline uses essential session cookies and browser storage for sign-in, PWA behavior, dismissed notices, anonymous poll continuity, preferences, and anonymous first-visit measurement within a browser tab. We retain account and community records while needed to run the club, preserve results and financial/reward audit history, meet legal obligations, resolve disputes, and prevent abuse. When an account is deleted, the login, profile, active participation records, messages, comments, shoutouts, reactions, uploaded chat photos, preferences, and push subscriptions are removed. Limited agreement, waiver, reward, redemption, and payment audit records may remain when reasonably needed for legal, fraud-prevention, dispute, or financial purposes; the live account reference is removed and optional personal metadata is cleared. Anonymous funnel events older than 90 days are removed as new funnel activity arrives, and hashed application rate-limit records older than seven days are automatically removed. Infrastructure providers may retain security logs under their own schedules.
You can update profile and notification settings, download a structured copy of your Sandline data, manage blocked members, and permanently delete your account from Settings. Blocking hides community content in the signed-in experience and suppresses community push notifications between the two accounts; organizers may still access content when needed to investigate a report or protect the service.
Depending on where you live, you may also have rights to access, correct, delete, restrict, or receive a copy of personal information, or object to certain processing. California residents may request information about collection and disclosure. We do not discriminate for exercising a privacy right. Email hello@sandlinetulsa.com if the in-app controls do not resolve your request. We may need to verify that the account belongs to you.
We use access controls, row-level database policies, encrypted connections, server-side validation, abuse controls, and restricted service credentials. No online service can promise absolute security; please use a unique password and contact us if something looks wrong.
Sandline accounts and organized participation through an account are intended for adults age 18 and older. We do not knowingly create accounts for minors. Contact us if you believe a minor created an account.
We may update this policy as Sandline changes. The effective date above will identify the latest version. The Terms of Service and Participant Agreement & Liability Waiver explain the agreements associated with an account. Questions, security reports, and privacy requests can be sent to hello@sandlinetulsa.com.